[Webkit-unassigned] [Bug 89647] New: [GTK] Assert failure in fast/canvas/canvas-createImageData.html for 64bit Debug bot

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=89647

           Summary: [GTK] Assert failure in
                    fast/canvas/canvas-createImageData.html for 64bit
                    Debug bot
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Unspecified
        OS/Version: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: WebKit Gtk
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: spena at igalia.com


Created an attachment (id=148759)
 --> (https://bugs.webkit.org/attachment.cgi?id=148759&action=review)
Crash log for DumpRenderTree

After revision r120897 <http://trac.webkit.org/changeset/r120897>, the test crashes at the following assertion:

ASSERT(isCellSpeculation(value.m_type));

in the JSC::DFG::AbstractState::execute method of Source/JavaScriptCore/dfg/DFGAbstractState.cpp

This test currently fails in GTK Linux 64bits Debug bot (see http://build.webkit.org/builders/GTK%20Linux%2064-bit%20Debug/builds/34242/steps/layout-test/logs/stdio), but passes on EFL Linux 64-bit Debug bot, as seen in http://build.webkit.org/builders/EFL%20Linux%2064-bit%20Debug/builds/1701/steps/layout-test/logs/stdio

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.